AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497
Summary coming soon
Our short summary of this story is on its way. Until then, read it at the source below.
Linked
5 sources cover this
- Fortinet PSIRT Advisories · 3dNode2Shell CVEs(opens the publisher’s site)
- CSO Online · 2dNode2Shell puts Microsoft and Node.js on Brotli patch duty(opens the publisher’s site)
- Canadian Centre for Cyber Security · 2dGoogle security advisory (AV26-1085) - Update 1(opens the publisher’s site)
- Canadian Centre for Cyber Security · 1dAL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497(opens the publisher’s site)
- AWS Security Bulletins · 1dCVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure(opens the publisher’s site)
- Palo Alto Networks Security Advisories · 17hCVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)(opens the publisher’s site)